TOGAF TOGAF Security and Risk Architecture 2

Question 1

What is a 'Risk Register' in the context of TOGAF architecture governance?

Accepted Answer

A document capturing identified risks, their classification, mitigation strategies, and ownership throughout the architecture lifecycle

Answer

A list of approved risk management software tools

Answer

A financial instrument for risk transfer

Answer

A register of security vulnerabilities

Question 2

In TOGAF, how does security architecture relate to the concept of 'Architecture Building Blocks'?

Accepted Answer

Security capabilities can be defined as Architecture Building Blocks (ABBs) and implemented as Solution Building Blocks (SBBs) for reuse

Answer

Security building blocks are purchased from vendors only

Answer

Security is not represented as building blocks

Answer

Building blocks only apply to technology infrastructure, not security

Question 3

What is the purpose of a 'Security Architecture View' in TOGAF?

Accepted Answer

To communicate the security architecture to security-focused stakeholders by addressing their specific security concerns

Answer

To document security team organizational structure

Answer

To list all security vulnerabilities

Answer

To document IT audit findings

Question 4

How does TOGAF recommend integrating compliance requirements (e.g., regulatory, legal) into the architecture?

Accepted Answer

Compliance requirements should be captured as architecture requirements and constraints early in the ADM, influencing architecture decisions

Answer

Compliance is handled by the legal team separately from architecture

Answer

Compliance only affects the Technology Architecture domain

Answer

Compliance is addressed only after the architecture is fully defined

Question 5

What does the TOGAF concept of 'Security Zoning' contribute to Technology Architecture design?

Accepted Answer

Segmenting the technology environment into zones with different trust levels and controlling inter-zone traffic

Answer

Defining time zones for global IT operations

Answer

Allocating server rack space in data centers

Answer

Defining IT department organizational boundaries

Question 6

In TOGAF, what is the relationship between 'Architecture Principles' and security constraints during Phase B (Business Architecture)?

Accepted Answer

Security-related Architecture Principles constrain what business processes and capabilities can be designed in Phase B

Answer

Architecture Principles do not apply to Business Architecture

Answer

Business Architecture ignores security until Phase D

Answer

Principles are only relevant for technology decisions